← Back

CVE-2016-1556

nvd nist
Published: Apr 21, 2017Modified: May 13, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.

Affected (6)

Netgear
6 products
Wnap320 Firmware
Wndap350 Firmware
Wndap360 Firmware
Wndap210v2 Firmware
Wn604 Firmware
Wnd930 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wnap320 Firmware
Up to 3.0.5.0
Running on/withPlatform Versions
Netgear
Wnap320
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wndap350 Firmware
Up to 3.0.5.0
Running on/withPlatform Versions
Netgear
Wndap350
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wndap360 Firmware
Up to 3.0.5.0
Running on/withPlatform Versions
Netgear
Wndap360
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wndap210v2 Firmware
Up to 3.0.5.0
Running on/withPlatform Versions
Netgear
Wndap210v2
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wn604 Firmware
Up to 3.3.2
Running on/withPlatform Versions
Netgear
Wn604
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Wnd930 Firmware
Up to 2.0.4
Running on/withPlatform Versions
Netgear
Wnd930
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: cret@cert.org
Mailing ListThird Party Advisory
Source: cret@cert.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.